@stephenw10 Just wanted to follow up and mark this one as SOLVED — removing the <phase1>1</phase1> from <ipsec> fixed the PHP errors and allowed the interfaces to load. I’ve got it back in production and have a bit more work to restore to the original config, but your advice definitely made the difference! Thanks so much for the help.

@jimp said in ACME certificate PHP Fatal Error: When you leave it blank it defaults to using DoH/DoT queries to cloudflare and quad9 IIRC Aha ... the log tells me just that : it's the local acme.sh that is checking regularly - like some kind of 'active waiting'. And when found, then it informs Letencrypt to do the file domain name zone TXT verification. If a local policy forbids DoH activity then 'acme.sh' will fail.

@steveits Ahh thank you, I did Google quite a bit but didn't find that. I hope there's a solution soon.

@gertjan I will attempt this tonight and report back. Thanks.

Danke - hatte ich noch nicht entdeckt!

@rcoleman-netgate That worked. A full reload of the firmware was required to clear the problem. Thanks

@piba said in 2.4.5_1 PHP Error installing HAProxy: unset($config['installedpackages']['haproxy']); write_config("fix haproxy install, remove empty config"); print("config fixed?"); By Jove Sir, I think you got it. I was able to install HaProxy.